Kate Cox

Ubisoft has caught a lot of flak from PC gamers over their uPlay system, online-authentication DRM that most recently came to attention for being unavailable at exactly the wrong time.

As it now turns out, uPlay is not only inconvenient to gamers, but it also comes with an insecure, exploitable browser plugin. Rock Paper Shotgun reports that the browser extension has a big fat hole in it that allows remote users to access and exploit a system. Malicious users can then install programs, or open, access, and delete files already on the PC.

Happily, as the exploit is in a browser extension, it's pretty simple for most PC gamers to disable on their own: